Skip to content

Vulnerabilities of Microsoft Microsoft OneNote

Is your version affected?

CVE Summary Score Published
CVE-2026-26133 AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network 7.1 High Mar 13, 2026
CVE-2025-29822 Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security… 7.8 High Apr 8, 2025
CVE-2025-21402 Microsoft Office OneNote Remote Code Execution Vulnerability 7.8 High Jan 14, 2025

Other Microsoft products